Known vulnerabilities in vCenter Server Appliance

Known vulnerabilities in vCenter Server Appliance

Vendor: Broadcom

Software: vCenter Server Appliance

Software CPE: cpe:2.3:a:broadcom:vcenter_server_appliance:*:*:*:*:*:*:*:*

Website: https://www.broadcom.com/

Total vulnerabilities: 14

Public exploits: 2

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105	CWE-835	Medium	Available	No	6.5 U3s, 6.7 U3q, 7.0 U3c	18.12.2021	SB2021121802 SB2021121903 SB2021122011 and 169 more
#VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046	CWE-94	High	Available	Exploited	6.5 U3s, 6.7 U3q, 7.0 U3c	15.12.2021	SB2021121504 SB2021121511 SB2021121512 and 178 more
#VU58816 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44228	CWE-94	Critical	Available	Exploited	6.5 U3s, 6.7 U3q, 7.0 U3c	10.12.2021	SB2021121003 SB2021121101 SB2021121201 and 338 more
#VU22423 - Exposure of sensitive information to an unauthorized actor CVE-2019-5538	CWE-200	Medium	No	No	6.5u3d, 6.7u3a	30.10.2019	SB2019103003 SB2022110314 SB2022110417
#VU22422 - Exposure of sensitive information to an unauthorized actor CVE-2019-5537	CWE-200	Medium	No	No	6.5u3d, 6.7u3a	30.10.2019	SB2019103003 SB2022110314 SB2022110417
#VU9712 - Permissions, Privileges, and Access Controls CVE-2017-4943	CWE-264	Low	No	No	-	22.12.2017	SB2017121910
#VU41033 - Cryptographic Issues CVE-2014-8371	CWE-310	Medium	No	No	-	08.12.2014	SB2014120837
#VU41034 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2014-3797	CWE-79	Low	No	No	-	08.12.2014	SB2014120838
#VU41594 - Permissions, Privileges, and Access Controls CVE-2014-3790	CWE-264	Medium	No	No	-	01.06.2014	SB2014060101
#VU42859 - Improper Control of Generation of Code ('Code Injection') CVE-2013-3079	CWE-94	Medium	No	No	-	01.05.2013	SB2012122104
#VU42860 - Permissions, Privileges, and Access Controls CVE-2013-3080	CWE-264	Medium	No	No	-	01.05.2013	SB2012122104
#VU42861 - Permissions, Privileges, and Access Controls CVE-2013-3107	CWE-264	Medium	No	No	-	01.05.2013	SB2012122105
#VU43232 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2012-6324	CWE-22	Low	No	No	-	21.12.2012	SB2012122104
#VU43233 - Exposure of sensitive information to an unauthorized actor CVE-2012-6325	CWE-200	Low	No	No	-	21.12.2012	SB2012122105